Senior IT Security Operation Specialist (SOC)

OBJECTIVES:
- Responsible for proactively monitoring, detecting, and analyzing security events.
- Responsible for managing and responding to security incidents, proactive defense, hunting threats and security vulnerabilities.
- Build and optimize processes for monitoring security events, managing, responding, investigating security incidents, and proactive threat hunting.
KEY RESPONSIBILITIES:
Plan:
- Participate in building processes, guidelines, and playbooks for SOC activities.
- Participate in Research and propose advanced technology solutions and practices to apply to SOC activities.
- Participate in defining requirements for security data for management, analysis, monitoring and reporting.
Acting:
- A. Participate in performing common tasks:
o 24/7 security monitoring of IT system.
o Manage and respond to security incidents.
o Proactive threat management and hunting.
o Manage security vulnerabilities.
o Operate and maintain the SOC system.
o Coordinate with relevant parties to review incident response scenarios and annual information security exercises.
o Coordinate with stakeholders to implement changes to address security issues.
- B. Security monitoring:
o Monitor and analyze IT security events 24/7 on the Company's systems and services to provide alerts about abnormally security events.
o Handle and verify abnormal events based on situations and scenarios for monitoring and responding to security events.
o Communicate and coordinate with relevant parties to verify and handle security incidents.
o Report on security monitoring status periodically (daily/weekly/monthly).
- C. Manage and respond to security incidents:
o Coordinate with relevant parties to respond to security incidents.
o Manage and monitor the progress of handling security incidents from start to finish.
o Coordinate with stakeholders to restore affected IT systems and services.
- D. Proactive threat management and hunting
o Early detection of new daily risks and threats: new attack trends, dangerous viruses/malware, fraudulent websites, data leaks, unauthorized mobile applications.
o Synthesize, analyze and coordinate with relevant parties to assess the impact on the bank's systems.
o Proactively hunt down threats to IT systems to eliminate and handle them promptly.
o Propose ways to handle threats and coordinate with relevant units to handle them.
o Report the results of proactive threat hunting and the status of handling detected threats.
o Report threat management status periodically.
- E. Manage security vulnerabilities
o Update information about security vulnerabilities and propose troubleshooting solutions to relevant units.
o Perform periodic security vulnerability scans for operating systems, applications, databases, networks and remediation plans using controls.
o Communicate and coordinate with relevant parties to plan and fix security vulnerabilities.
o Monitor and report progress in remediating security vulnerabilities.
o Report security vulnerability management status periodically.
- F. SOC system administration and maintenance
o Develop rules, principles, scenarios, policies, and security configuration parameters for SOC solution.
o Implement patches and upgrades for SOC system to ensure security.
o Make necessary changes on SOC systems to meet ANBM management goals.
o Managing permissions and decentralization on the application layer of SOC solution.
- G. Administration, analysis and reporting of ANBM data.
o Support for SOC members and stakeholders in security data administration, analysis and reporting activities .
Checking/ Reviewing.../ improving:
- Participate in managing and monitoring indicators and measures of IT security status.
- Monitor, synthesize and provide information on the effectiveness of abnormaly event monitoring rules/scenarios.
- Track, monitor and evaluate the results of implementing corrective actions and mitigation measures identified from security incidents.
- Participate in reviewing and updating processes, instructions, and playbooks for SOC activities.
Develop People:
- Participate in research and propose courses and certificates suitable to the SOC.
Other:
- Participate in implementing security security projects.
- Perform other tasks assigned by Head of IT Security.